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(57) ABSTRACT 

A system and method for maintaining security in a distrib- 
uted computing environment comprises a policy manager 
located on a server for managing and distributing a security 
policy, and an application guard located on a client for 
managing access to securable components as specified by 
the security policy. In the preferred embodiment, a global 
policy specifies access privileges of the user to securable 
components. The policy manager may then preferably dis- 
tribute a local client policy based on the global policy to the 
client. An application guard located on the client then 
'manages access to the securable components as specified by 
the local policy. 
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